Writing to known_hosts should be optional

[roberth]

With #1464 we can provide known_hosts independently of ~/.ssh/known_hosts.
Most use cases don't need this file to be written anyway, so we can stop doing so and make the existing functionality available as a separate subcommand for those who do rely on it in their workflow.
This further simplifies the common case where all ssh access happens through nixops ssh.